Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
08/08/2024, 22:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
738b9213365b0e475f8c81e3f55396f40a9d1852632bd7f09c9f9441b7140e21.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
738b9213365b0e475f8c81e3f55396f40a9d1852632bd7f09c9f9441b7140e21.exe
Resource
win10v2004-20240802-en
2 signatures
150 seconds
General
-
Target
738b9213365b0e475f8c81e3f55396f40a9d1852632bd7f09c9f9441b7140e21.exe
-
Size
9.0MB
-
MD5
e86525178c6cf43cfd5291b3324109cb
-
SHA1
1e36971652f529c086f7417a008f63f65b899c92
-
SHA256
738b9213365b0e475f8c81e3f55396f40a9d1852632bd7f09c9f9441b7140e21
-
SHA512
ba87dba1bf889f97beaef16ded37c42f0d761de66d361fad6455ae1acea9c509ab7e4977f5d1e6dd52038be609a341b56669699ce801c270db5c431137be06cf
-
SSDEEP
49152:ErSFmekaIPekYFnAYF7gPdzzWTiBY/LppZZA3:ErSUevYzzGp
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2772 738b9213365b0e475f8c81e3f55396f40a9d1852632bd7f09c9f9441b7140e21.exe 2772 738b9213365b0e475f8c81e3f55396f40a9d1852632bd7f09c9f9441b7140e21.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2772 738b9213365b0e475f8c81e3f55396f40a9d1852632bd7f09c9f9441b7140e21.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\738b9213365b0e475f8c81e3f55396f40a9d1852632bd7f09c9f9441b7140e21.exe"C:\Users\Admin\AppData\Local\Temp\738b9213365b0e475f8c81e3f55396f40a9d1852632bd7f09c9f9441b7140e21.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2772